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A note on integral points on elliptic curves 
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^P ' Abstract. We investigate a problem considered by Zagier and 

Elkies, of finding large integral points on elliptic curves. By writ- 
ing down a generic polynomial solution and equating coefficients, 
we are led to suspect four extremal cases that still might have non- 
degenerate solutions. Each of these cases gives rise to a polynomial 
system of equations, the first being solved by Elkies in 1988 using 

'^ ' the resultant methods of Macsyma, with there being a unique 

rational nondcgenerate solution. For the second case we found 

Lh ' that resultants and/or Grobner bases were not very efficacious. 

Instead, at the suggestion of Elkies, we used multidimensional 
p-adic Newton iteration, and were able to find a nondegenerate 
solution, albeit over a quartic number field. Due to our methodol- 
C^ ' ogy, we do not have much hope of proving that there are no other 

solutions. For the third case we found a solution in a nonic number 
field, but we were unable to make much progress with the fourth 
case. We make a few concluding comments and include an ap- 
^ ' pendix from Elkies regarding his calculations and correspondence 

[^ ' with Zagier. 

o\' 

^P I Resume. A la suite de Zagier et Elkies, nous recherchons de 

grands points entiers sur des courbes elliptiques. En ecrivant 
\^ [ une solution polynomiale generique et en egalisant des coefficients, 

f^ ' nous obtenons quatre cas extremaux susceptibles d'avoir des so- 

lutions non degenerees. Chacun de ces cas conduit a un systeme 
d'equations polynomiales, le premier etant resolu par Elkies en 
1988 en utilisant les resultants de Macsyma; il admet une unique 
solution rationnelle non degeneree. Pour le deuxieme cas nous 
avons constate que les resultants ou les bases de Grobner sont 
peu efficaces. Suivant une suggestion d'Elkies, nous avons alors 
utilise une iteration de Newton p-adique multidimcnsionnellc et 
j^ ' decouvert une solution non degeneree, quoique sur un corps de 

nombres quartique. En raison de notre methodologie, nous avons 
peu d'espoir de montrer qu'il n'y a aucune autre solution. Pour 
le troisieme cas nous avons trouve une solution sur un corps de 
degre 9, mais n'avons pu traiter le quatrieme cas. Nous concluons 
par quelques commentaires et une annexe d'Elkies concernant ses 
calculs et sa correspondance avec Zagier. 
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1. Introduction 

Let E be an elliptic curve given by the model y^ = x^ + Ax + B, and 
suppose that {X, Y) is an integral point on this model. How large can X be 
in terms of | A| and \B\? One measure of the impressiveness of the size of an 
integral point is given by the quotient p = log(X)/log(max(|^p^, li?!-*^'^)), 
which, as Zagier [11' indicates, can be interpreted as saying that X is of 
the order of magnitude of the pth. power of the roots of the cubic polyno- 
mial x^ + Ax + B. 

Lang [7] makes the conjecture that p is bounded, and notes (see [TTj) 
that he and Stark worked out that generically p < 10 + o(l) via proba- 
blistic heuristics, though a construction of Stark indicated that in similar 
situations there might be finitely many exceptional parametric families with 
larger p. Vojta |l()j has related this conjecture to his more general Diophan- 
tine theory, where again these exceptional families cannot be eliminated. 
In 1987, Zagier J^ gave a construction that gives infinitely many curves 
with p > 9 — o(l), and listed some impressive examples from numerical 
calculations of Odlyzko. 

In a letter to Zagier in 1988, Elkies constructed infinitely many examples 
that satisfy p > 12 — o(l). His construction is polynomial-based, and 
reduces to solving a system of polynomial equations formed from equating 
coefficients. There are exactly four choices of parameters that both yield 
p = 12 — o(l) and for which there is a reasonable hope that a solution 
might exist. The first of these was the case worked out by Elkies. This 
already led to a system of 4 polynomial equations in 4 variables, which 
Elkies notes took a longish session of Macsyma [S] to solve. The second 
choice of parameters immediately (via linear substitution) leads to a system 
of 6 equations and unknowns; even though computers have gained much 
in speed over the last 15 years, the resulting system is still too difficult to 
solve via Grobner bases or resultants. We eliminated one variable from the 
system via another linear substitution (though this creates denominators), 
and then another via a resultant step. This gives us a rather complicated 
system of four equations and unknowns; the degrees of the polynomials 
were sufficiently large that, again, Grobner bases and resultants were not of 
much use. We then proceeded to try to find solutions via a multidimensional 
p-adic iterative Newton method. We found one such solution over a quartic 
number field; it is an inherent problem with this method that we have little 
hope of proving that we have found all the solutions. With the third choice 
of parameters, we found a solution in a nonic number field, and with the 
fourth case we made little progress. 

As an appendix, we include some calculations of Elkies regarding the 
first case, and his 1988 letter to Zagier. 
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2. Families of Pell type 

First we review the construction of Elkies. Consider the equation 

(1) X{tf + A{t)X{t) + B{t) = Q{t)Y{tf 

where A, B, Q, X, Y are polynomials in t with Q quadratic. Given a ra- 
tional polynomial solution to this equation, via scaling we can make all 
the polynomials integral. The theory of the Pell equation implies that if 
the quadratic polynomial Q{t) is a square for one integral t-value, then it is 
square for infinitely many integral t, and thus we get infinitely many curves 
y^ = x^ + A{t)x + Bit) with integral points {X{t),Y{t)y^Qtt}). 

Let a, b, q, x, y be the degrees of these polynomials respectively. We wish 
for p = x/max(a/2,6/3) to be as large as possible. If we do a parameter 
count, we get that there are {a + b + q + x + y) + 5 coefficients of our 
polynomials. The total degree of our equation is 3x = q + 2y, so we get 
3a; + 1 equations. When 3x + 1 < a + b + q + x + y + 5, we might expect 
there to be a solution. However, we first need to remove the effect of the 
action of the group PGL2(Q) on our choice of coefficents. 

Letting 1{P) be the leading coefficient of a polynomial P, we first scale 
t by l(X)/l(Y) and then multiply through 1{Y)^ /l{X)y , so as to make 
X, Y, Q all monic. Then we translate so as to eliminate the t^~^ term in Y. 
Then we effect t -^ 1/t and multiply {X,Y,Q,A,B) by {t'',ty,f,t'^'',t^''), 
and then scale so as to make the t-coefficient of X be equal to 1. Finally 
we undo the t -^ 1/t transformation in the same manner. So we are left 
with (a + 1) + (6 + 1) + g + (x — 1) + (y — 1) coefficients, while we also 
lose one condition, namely that the leading coefficients match. Thus we 
want to have a + b + q + x + y>3x with p = x/ max(a/2, 6/3) as large as 
possible, and this turns out to be 12. We get 4 different possibilities, namely 
(a, 6, q, X, y) = (0, 1, 2, 4, 5), (1, 1, 2, 6, 8), (1, 2, 2, 8, 11), (2, 3, 2, 12, 17). For 
instance, for the first case we have the polynomials 

X{t) = t^ + t^ + X2t^ + xit + xo, Y{t) = t^ + yst^ + 2/2*^ + yit + 2/0, 

Q{t) = t^ + qit + qo, A{t) = ao, B{t) = bit + bo, 

and equating the t^-t^^ coefficients gives us 12 equations in these 12 un- 
knowns. Fortunately, simple linear substitutions easily reduce this to 4 
equations and unknowns; we give one such reduced set, in order to indicate 
the complexity of the equations. 

+417x2 -5(?g+171<?g-939go+1339=0, 



We could alternatively equate two coefficients, or set the linear coefficient of Q equal to 1; 
we found that fixing the linear coefficient of X to be 1 was best amongst the various choices. In 
this scaling, wc assume the coefficient is nonzero; the alternative case can be handled separately. 
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'i:Xoxi+ixQX2+ixoqo+Sxo+2x\—xix'^—2xiX2qo^^^iX2+^xiq'f-^ — V)xiqo — 17xi+2x?^qo+bx'^ — 
-12a;2gg+26a;2go+38a;2+10gg-71gg+80(jo+83=0, 

120a;oa;iX2— 72x0X1 go+312a;oa;i—60a;oa;2+216a;oa;2(iio— 576x00:2— 60a;ogQ +336x0 go ~516a;o + 
+32x3-168x2x2+288x2go-936xf-18xix|-54xix|(?o+342xix|+114xiX2gg-1836xiX2go+ 
+4146xiX2-42xigg+1302xig2-6870xigo+9642xi+9x*+72x3go-234x3-342x2g2+2658x2go- 
-4488x|+336x2<?g-4518x2gg+17004x2go-19446x2-75(?j^+1486gg-9036gg+22098go=19041, 

48xgx2-48xj^<j0+240x,^+64xoxf-128xoxix2+288xoxigo"-768xoxi-40xox|+24xox^(jo- 
-72xox|+40xoX2<jj^-816xoX2<jo+1864xoX2-24xo<j|j+792xo<j^-4232xogo+5928xo-28xfx|- 
-24xfx2<jo+24x2x2+36x2<j2-312x2go+420x2+84xix|-84xix|go+388xix^ -244x1X2^0 + 
+1480xiX2go-1876xiX2+180xigg-2028xigg+6428xigo-6180xi+3x|+9x|ijo-84xf-26x|gg+ 
+480x|go-1186x|+10x^gi,^-224x^gg+1310x^go-2140x|+7x2gjt-464x2gg+4210x2gg- 
-12472x290+11807x2 -3gf;+228g(!-2942gg+14284g2-29791go+22560=0. 

If we are willing to accept variables in denominators, we can go one step 
more and eliminate xq from one of the first three equations. A system 
like this was solved by Elkies in 1988 using Macsyma which uses resul- 
tants; solving it is almost instantaneous^ with MAGMA today, using either 
Grobner bases or resultants. We get an isolated solution and also two 
(extraneous) positive-dimensional solution varieties (which correspond to 
points on the singular plane cubic curve): 

(xo,xi,X2,(Zo) =(Tg2[16n2 - 200u - 239], i[4u - l],n, I), 

(^,_2^ + 3,^_5,^;),(^,|,|,n)_ 

From the isolated point, via back-substitution we get 

(t, ,, ,, n, r, r, h h \ — ^715 165 77 55 o 216513 3720087 531441 N 

12/0, 2/1, 2/2, 2/3, 9i,«o,0o,0ij - l-er'Tr'Te'T'-^' 4096 > — 131072 ' 8192 /• 

To derive the solution in the form given by Elkies, we first want to 
eliminate denominators, and we also wish to minimise the value of A that 
occurs at the end (that is, get rid of spurious powers of 2 and 3). This can 
be done by replacing t by 1 — 9t/2 and then multiplying (X, Y, Q, A, B) by 
(s, -4s/3,9s/16,s2,s3) ^iigpg g = 128/81. This gives us 

X{t) = 6(108*"^ - 120t^ + 72*2 _ 28^ _^ 5)^ 

Y{t) = 72(54t^ - mf^ + 45t^ - 21*^ + 6t - 1), 

Q{t) = 2(9*2 - lot + 3), A{t) = 132, B{t) = -144(8t - 1). 



o 
That is, provided one deals with the multivariate polynomial rings properly and works over 

the rationals/integers at the desired times. 
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Note that Q(l) = 2^, so that there are infinitely many integral values of t for 
which Q{t) is square. As noted by Elkies, we have that X{t) ~ i?(t)^/2^^3^, 
so that small values of t do not give very impressive values of p. 

2.1. The second case. We next consider the second case EPZn of the 
Elkies-Pell-Zagier equation Q, where {a,b,q,x,y) = (1,1,2,6,8). After 
making rational transformations, we are left with 18 equations in 18 un- 
knowns, which reduce to 6 upon making linear substitutions. We can reduce 
to 5 via allowing denominators,^ and then eliminate one more variable via 
resultants, but at this point, we are left with equations with too large of de- 
grees for resultants or Grobner bases to be of much use. Parts of two of the 
four equations appear below (the whole input file is about 500 kilobytes) 

2101324894157987694g^^ + 107129273851487767680x^xi2;^g^ + . . . = 0, 

32970900880723713844451225823gg2_ 

- 34328441295817679913295188031488x^x|2;Jg^ + . . . = 0. 

We denote this reduced system of equations by Rn. 

It was suggested to us by Elkies that it might be possible to find a solution 
via multidimensional p-adic Newton iteration. In general, this method is 
most useful when we are searching for zero-dimensional solution varieties in 
a small number of variables. Writing / as our system of equations, we take 
a p-adic approximate solution s and replace it by s — J(s)~^/(s), where 
J(s) is the Jacobian matrix of partial derivatives for our system evaluated 
at s. Since the convergence is quadratic, it is not difficult to get p-adic 
solutions to high precision. From each liftable local solution mod p we 
thus obtain a solution modulo a large power of p, and then use standard 
lattice reduction techniques §2.7.2] to try to recognise it as a rational or 
algebraic number. 

First we tried the primes p = 2,3, but we found no useful mod p solutions; 
all the local solutions had a noninvertible Jacobian matrix.^ Furthermore, 
since a solution to Rn might very well have coordinates whose denominators 
have powers of 2 and 3, not finding a solution was not too surprising. With 
p = 5 we again found some (probable) positive-dimensional families and 
three other solutions, of which two had an invertible Jacobian modulo 5. 
However, these solutions to Rn failed to survive the undoing of the resultant 



This linear substitution is probably most efficiently done via resultants, as else the denomi- 
nators will cause problems for some computer algebra systems. 

This technique appears in 2], while J. Wetherell tells us that he has used it to find torsion 
points on abelian varieties. In 0, the lifting step was done via computing derivatives numerically, 
while we chose to compute them symbolically. Uses of this technique in situations close to those 
that occur here will be described in jSj. 

Many of them had a Jacobian equal to the zero matrix, and these we expect to come from 
positive-dimensional solution varieties. 
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step, and thus do not actually correspond to a solution to EPZn- We found 
the same occurrence for p = 7, 11, 13 — there were various Qp solutions to 
our reduced system, but these did not lift back to original system. 

With p = 17 our luck was better, as here we found a solution in the 
dihedral quartic number field K defined by z'^ — 2z^ — 4z^ + 5z — 2, whose 
discriminant is —3^11^. Letting ^ be a root of this polynomial, the raw 
form of our solution is 

X2 = 2430000 (90699846)3 _^ 664283846*2 + 199348166* - 283298787), 

X3 = _^(202406l3 + 705766*2 _ 1216166* - 441839), 

X4 = 950 (-58086*3 _ 75685)2 ^ 339686* + 23959), 

qo = 2^(25766*3 + 37606*2 _ 87206I + 10971). 

After undoing the resultant step the rest is but substitution and we readily 
get a solution to EPZn, albeit, in a quartic number field. Note that our 
prime 17 is the smallest odd unramified prime which has a degree 1 factor 
in K; due to our method of division of labour we actually first found the 
solution mod 29. Since we do not know K ahead of time, we have little 
choice but to try all small primes. 

We next introduce some notation before stating our result; we have in- 
finitely many Pell equations from which to choose, and so only present the 
simplest one that we were able to obtain. Let 

P2 = e, q2 = 9-l, r2 = 6*2-6*-5, and ps = 26*^ - 26* + 1 

be the primes above 2 and the ramified prime above 3, and 

r/i = 6*3 + 6*2 - 26* + 1 and 772 = 6*3 - 36* + 1 

be fundamental units, so that we have P2Q2f2 = 2 and pg = 3rjfr]2 ■ Let 
/? = 26*3 + 26*2 - 66* - 3 (this is of norm 3271), and with 
Q{t) = C2f + cit + CO = 3plq2(3vh2^t^ + 2(zir?f/?(e3 _ ^2 ^ ^^^^ ^ ^2^2^2 
we have 
X{t) = 2H*pl(g(3r]lri2H^ + 2H'^qlr2(5rlri2^{l76^ + 26^ - 716 + 33)^^+ 
+ 2233^2/377?%^ (14636*3 - 24366*2 - 26676* + 1903)*''+ 
+ 24g2/3??i??^^ (259016*3 + 320606*2 - 524576* + 15455)^3+ 
+ 12g|p3/3r/? (403746*3 + 474226*2 - 619766* + 37707)^2+ 
+ 2g|r^p3/3?7?772 (70816*3 - 8546*2 + 907916* - 23035)t+ 
+ g2/3??i??i (1900356*3 + 1990086*2 - 1741896* + 50449), 

A{t) = -12qlr2P3(3%V2H0^ " + l)t- 

- qbsP^m^i^io^ -0 + l)(9e3 _ 2^2 ^ 5^ ^ g^^ 
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and 

B{t) = -6qlri(3S,r]^\2e - 1)H- 

- g2^2/3VS^^(2^ - 1)^(4^^ + 18^^ - 160 + 1). 

With the above definition of C2 = 3p2?2/3^i^2' ' ^^ have that 

/i = P2'Q2P^'vi^V2ie'^ + 20^-9 + l)^ + rsr/f ^2(30^ - 199^ + 200 - 5), 

/2 = 2^P2P3VV2^V^ + ^1^2^' (190' - 510' + 380 - 5), 
and 

/s = P2q'lr]^SIiQ0^ - 20 + l)^/^ + r2mmi'^99^ " 140' " 710 - 41) 
are units of relative norm 1 in i^(y^V Again from the above definitions 
we have ^ = ±q2f3r]2 = ±(490^ + 410^ - 770 + 33), and so we solve the 
Pell equation and obtain square values of Q{t) by taking 

t = 2^/couv + V ci where /1/2/3 = u + Vy/c2 

for integers i,j,k. We can make t integral via various congruence restric- 
tions on (i,j,k); however, note that p2 divides all but the constant coeffi- 
cients of our polynomials (including Y), and so we still get integral solutions 
to EPZn even when p2 exactly divides the denominator of t. Similarly, the 
only nonconstant coefficient that p^ fails to divide is the linear coefficient 
of Q; since p^ divides Y[t), this nuisance evaporates when we consider so- 
lutions to EPZn- As t ^ 00 the norm of the ratio X(t)/A{t)^ tends to 
1/2^^3^^^ 17^3271^^; we do not know if this is as large as possible. 

We are fairly certain that there are no more nondegenerate algebraic 
solutions to EPZii, but we have no proof of this. For the small primes, 
we have identified every local solution to Rn that has invertible Jacobian 
as algebraic. In addition to the above quartic solution, there are five such 
solutions having degrees 13, 17, 19, 22, and 22, with each having maximal 
Galois group. 

2.2. The third case. We next discuss whether we expect to be able to 
find a solution for the third set of parameters (a, b, q, x, y) = (1, 2, 2, 8, 11). 
Analogous to before, via linear substitutions and a resultant step, we should 
be able to get down to about 6 equations and unknowns, and we call the 
resulting system Rm. This already is not the most pleasant computational 
task, but only needs be done once (it takes about 15 minutes). It takes 
time proportional to p^ to check all the local solutions, so we can't take p 
too much above 20. The size of the minimal polynomial of a prospective 



°Since the local images of these solutions to Rn failed to survive the undoing of the resultant 
step modulo p, this determination of their algebraicity is unnecessary as evidence toward our 
claim that EPZjj has no more solutions, but might be interesting in that it shows the splitting 
of a large-dimensional algebra into many smaller fields. 
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solution does not matter much due to the quadratic convergence of the 
Newton method, but the degree of the field of the solution has a reasonable 
impact. We cannot expect to check fields of degree more than 30 or so. We 
need p to have a degree 1 factor, but by the Chebotarev density theorem we 
can predict that this should happen often enough (even for a high degree 
field) so that some prime less than 20 should work. 

With these considerations in mind, we checked the Rni system for local 
solutions for all primes p < 20 and with p = 19 we found a local solution 
that lifted to a global EPZni solution in the nonic number field given by 
^9 _ 2^8 _ Q^7 j^ g^6 _ 7^5 _^ ]^g^4 _^ 44^3 _^ 33^2 _^ 24z + 24, which has dis- 
criminant — 2^'^3 5^11*^. For reasons of space, we do not record the solution 
here. For EPZiv we were unable to use resultants to reduce beyond 13 
equations and unknowns, and did not even attempt to find local solutions, 
even with p = 5. If we had been able to reduce the system down to 10 vari- 
ables (as would be hoped from analogy with the above), we could probably 
check p = 5 and maybe p = 7. 

3. Concluding comments 

Note that the above four choices of (a, b, q, x, y) are members of infi- 
nite families for which each member has a reasonable possibility of having 
infinitely many solutions with p > 10. Indeed, by taking 

(2m, 3m, 2, 10m + 2, 15m + 2) p=l0 + 2/m 

10m + 4 



(a, 


• b, 


q, 


x,y) 


(a, 


.b, 


Q, 


x,y) 


(a, 


.b, 


q, 


x,y) 


(a, 


.b, 


Q, 


x,y) 



(2m,3m+ 1,2, lOm + 4, 15m + 5) p 

(2m + 1,3m + 1,2, 10m + 6, 15m + 8) p 
(2m + l,3m + 2,2, lOm + 8, 15m+ll) p 



m + 1/3 
10m + 6 
m+1/2 
10m + 8 



m + 2/3 

in each case we have, since a + b + q + x + y = 3x, the same number 
of equations and unknowns, with the value of p = x/max(a/2, 6/3) as 
indicated. However, we might also suspect that the fields of definition of 
these putative solutions become quite large; thus there is no contradiction 
with Lang's conjecture, which is only stated for a fixed ground field. 

We can also note that with (a, b, q, x, y) = (2, 3, 2, 10, 14) we can expect 
there to be a nondegenerate 1-dimensional solution variety V with p = 10. 
This presumably could be found by a variant of the above methodology. 



For both p = 13 and p = 17 the local image of this global solution was incident with a 
higher-dimensional solution variety. 

^One model is given modulo 19 by X{t) = t^+t'^+6t^ + l6t^+8t'^+'it'^ + 12, Q(t) = t2+3J+13, 
A{t) = 16i + 15, B{t) = 174^ + 6i + 14, and the interested reader can readily verify that this lifts 
to a Qj^g-solution with coefficients xs,XT,q2 = 1 and yio = 0. 
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perhaps by taking specialisations to O-dimensional varieties and finding 
points on these, and then using this information to reconstruct V. We have 
not been able to make this work in practise; although the specialised system 
can be reduced to 7 equations and unknowns and we can find a liftable 
solution mod 5, it appears that the process of specialisation increases the 
degree of the field of the solution beyond our computational threshold. 

3.1. Performance of computer algebra systems. In the above com- 
putations we used both PARI/GP [0] and Magma [T]. In the end, we 
were able to do all the relevant computations using only Magma, but this 
was not apparent at the beginning. The main difficulty with Magma was 
dealing with multivariate polynomial rings, especially as we eliminated vari- 
ables — if we did not also decrease the dimension of the ambient ring, we 
could experience slowdown. We also found it to be important to work over 
the integers rather than rationals as much as possible, as else the continual 
gcd-computations to eliminate denominators could swamp the calculation. 
The availability of multivariate gcd's in Magma frequently allowed us to 
reduce the resulting systems by eliminating a common factor. We found 
Magma much superior than PARI/GP in searching for local solutions. 
Magma did quite well in obtaining algebraic numbers from p-adic approx- 
imations; after discussions with the maintainer of PARI/GP, we were able 
to get algdep to work sufficiently well to obtain the above solutions. The 
lifting step^^ was noticeably slower in MAGMA than in PARI/GP, but as 
we noted above, the time to do this is not the bottleneck. 

3.2. Ackno'wledgements. Thanks are due to Karim Belabas, Nils Bruin, 
Noam Elkies, and Allan Steel for comments regarding this work. The au- 
thor was partially funded by an NSF VIGRE Postdoctoral Fellowship at 
The Pennsylvania State University, the MAGMA Computer Algebra Group 
at the University of Sydney, and EPSRC grant GR/T00658/01 during the 
time in which this work was done. 
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Appendix by Noam D. Elkies (Harvard University) 

I. Calculations for the First Case 

We compute polynomials X,A,B,Q,Y £ C(f) of degrees 4,0,1,2,5, 
satisfying 

(2) X^ + AX + B = QY"^. 

We may normalize X, Y to be monic, and translate t so y = t^ — c. Since © 
has degenerate solutions with {X,A,B,Y) = {Q{t + bi)'^,0,0,Q{t + bif), 
we write 

(3) X = Q{{t + hif + 262) + 2ht + 264 

for some scalars fci, &2) ^3) ^4- Because AX + B = 0{t^) at t = 00, we have 
Y = {X^ /QY'"^ + 0(t~^), which determines Y and imposes two conditions 
on 61, 62, ^3, &4,c. Considered as equations in &4,c, these conditions are 
simultaneous linear equations, which we solve to obtain 

(4) ., = |-(3.,-26,«, ,. fe-M.)(3.i-».M3 + 2.i) 

663 362 O3 

Then A is the t^ coefficient of QY^ — X^; we compute 

(5) A = -^(63 - 6162)' + :T^(66i6i + 2blhl - Qb^hl - Ibib^ + bjbi). 

02 0O3 
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The identity © then holds if the t^ and i^ coefficients of X^ + AX - QY"^ 
vanish. Writing these coefficients in terms of h\,h2,h^, we find that they 
share a factor 63 — 6162 that we already encountered in our formula Q for c. 
Namely, the t^ and t^ coefficients are 

(6) (,3_,,,,)5i^^^Ml_t^5Miz:^. 

363 

(7) 

, 18^1 + (15^1 - mlhl)hl + Ibh^bl + (26| - 66f 6i)63 - 2^16^ 

(^^ - ^^^^) ^Ml • 

If 63 = 6162 then c = and 64 = 62/6) s-i^d we calculate A = —62/3 and 
B = 262/27. But this makes X^ + AX + B = {X + 2(6^/3))(X - {hl/2,)f, 
so our elliptic curve degenerates to a rational curve with a node (or a cusp 
if 62 vanishes too). 

Therefore the numerators of the fractions in (|6|7|) must vanish. The first 
of these yields a linear equation in 61 , which we solve to obtain 

(') '' - hisq + qy 

Substituting this into yields 26^63(36! - 26|)/(36| + 6|). We conclude 
that 36| = 26f . 

All nonzero solutions of 36| = 263 are equivalent under scaling. We 
choose (621^3) = (6,12) and work our way back. We find 61 = 10/3, and 
then c = -8/9, 64 = -2, and finally A = 528 and B = 128(12t + 31). To 
optimize the constants in the resulting family of large integral points on 
elliptic curves, we replace t by 6t — (10/3) and renormalize to obtain at last 

^ = 33, B = -18(8t - 1), Q = 9*2 - lot + 3, 

(9) X = 3(108*"^ - 120*3 + 72*2 _ 2gt _^ 5) 

Y = 36(54t^ - GOf^ + 45*3 - 21*2 _^ g^ _ ;^)_ 

To complete the proof that there are no other solutions, we must also 
consider the possibility that the denominator of ^ vanishes, which is to 
say 62 = or 63 = 0. If 62 = then the t^ and t^ coefficients of X^ — QY"^ 
reduce to 36| and 663(6163 + 64). Thus we also have 63 = 0, and then 
A = -3bl and X^ + AX - QY"^ = 2h% so the condition on the t^ and t^ 
coefficients holds automatically for any choice of 64 and c. But this makes 
X^ + AX + B = {X — 264 )(X + 64)2, so again we have a degenerate elliptic 
curve. If 63 = but 62 7^ we obtain 61 = and 664 = 62(30 — 62). Then 
A = -6|(9c2 + 46^)/12, and X^ + AX - QY^ has t^ coefficient zero but 
t2 coefficient b2C^ /2. Since we assume 62 / 0, we conclude c = 0, leaving 
A = —62/3 and B = 262/27, for the same degenerate elliptic curve as above. 
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II. Letter from Noam D. Elkies to Don Zagier (1988) 

Dear Prof. Zagier, 

I have read with considerable pleasure your note on "Large integral points 
on elliptic curves" , which Prof. Gross showed me in response to a question. 
In the second part of that note you you define a "measure of impressive- 
ness" , /), of a large integral point {x, y) on the elliptic curve x^ + ax + b = y"^ 
by 

p = log(a;)/log(max(|a| 2 , |6|3)) 

and exhibit several infinite families of such points for which p = 9+0(t-^). 
You conjectured, though, that p could be as large as 10, so I searched for 
an infinite family confirming this. What I found was an infinite family of 
Pell type for which p = 12 — 0{■^^^). The implied constant is quite large — 

bigger than 200 — so p approaches 12 very slowly, remaining below 5 2 for x 
in the range [1, 10^] of Odlyzko's computation, and first exceeding 10 and 
11 for X of 51 and 107 digits respectively. 

In your note you give a probabilistic heuristic suggesting that p should 
never significantly exceed 10. But a naive counting of parameters and 
constraints for a Pell-type family 

(10) X^{t) + A{t)X{t) + B{t) = Qit)Y\t) 

(in which A, B are polynomials of low degree, Q is a quadratic polynomial 
in t, and X, Y are polynomials of large degree) suggests that (jlOf) should 
have several solutions with p ^ 12, most simply with A constant, B lin- 
ear, X quartic and Y quintic. Actually finding such a solution required a 
longish MACSYMA session to solve four nonlinear equations in four vari- 
ables, which surprisingly have a unique nontrivial solution, (necessarily) 
defined over Q: up to rescaling t and the polynomials A, B, Q, X, Y, the 
only solution to (jTU)) is 

A = 33, B = -18(8t - 1), Q = 9f2 - Wt + 3, 

(11) X = 324t^ - 360*3 _^ 216*2 - 84t + 15, 

Y = 36(54*^ - 60*"^ + 45*3 - 21*^ + 6* - 1). 

As it stands, (|TT|) seems of little use because Q is never a square for 
t G Z. However, we may rescale Hll() by replacing {A,B,X) by {AA = 
132, 8-6, 2X), which yields an integral point provided 2Q is a square. That 
Pell-type condition is satisfied by t = 1 and thus by infinitely many t, 
yielding an infinite family of solutions (6, x, y) to x^ + 132x + 6 = y^ 
with X ~ 2~253-4^4_ rpj^g g^^i^ fj^j^^Q^ 2-253-4 = 3.68 • 10-1° means 



A note on integral points on elliptic curves 13 

that, although p eventually approaches 12, the first few admissible val- 
ues of t yield only mediocre p: the second such value, t = 15, when 
b = —17424 and x = 35334750 (the largest such x to fall within the bounds 
of Odlyzko's search), produces only p = 5.34 and was probably ignored; 
only the ninth value t = 812111750209 produces p > 10, and only the 
eighteenth, t = -48926085100653611109021839, reaches p > 11. 

Some final remarks: Prof. Lang tells me that Vojta's conjectures imply 
the p < 10 + e conjecture except possibly for a finite number of exceptional 
families such as those obtained by rescaling ()11|1 . Vojta proves this implica- 
tion in a yet unpublished paper, but leaves open the existence of exceptional 
families. It's interesting to compare this situation with the similar conjec- 
ture of Hall concerning \x^ — y^|, where the best infinite families known 
come from the identity 

(12) {t^ + lot + 5f - {t^ + 22t + 125)(t^ +4t- if = 1728t 

(Exer. 9.10 in Silverman's The Arithmetic of Elliptic Curves, attributed to 
Danilov, Math. Notes Acad. Sci. USSR 32 (1982), 617-8), which yields Pell- 
type solutions with p tending this time to the "correct" value of 6. There 
is a natural reason (which Danilov does not mention in his article) for H12|) 
to be defined over Q: the fifth modular curve {j{z),j{hz)) is rationally 
parametrized by 

(t^ + m + 5)3 1 

3{z) = fit) = , j{5z) = /(j), 

and /(t) is a sixth-degree rational function with a fifth-order pole at infinity 
(a cusp), two third-order zeros (CM by ^(1 + \/— 3)) and two second-order 
values of 1728 (CM by \/— T = i; the appearance of z = ^{i it 2) when 
j{z) = j{5z) = 1728 splits the other two inverse images of 1728 under /) — 
hence ()12() . I have no similar rationale for (jllj) . nor for why it gives "too 
large" a value of p. 

Sincerely, 
(signed) 
Noam D. Elkies 
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